Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa
File:                     8440a229-96f8-4a89-b068-a25fe646532e.roa (raw, json)
Hash identifier:          tXL6q2zaNM22Ti84462X3zIuUi7u1F93WeF9ANENvgY=
Subject key identifier:   49:24:A3:74:BA:02:23:08:42:B0:A0:37:73:70:96:B5:20:D1:77:6D
Certificate issuer:       /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
Certificate serial:       18755F515C7CCDB00AE8EFFD00229FFE39595A9F
Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa
Signing time:             Sat 31 May 2025 00:00:13 +0000
ROA not before:           Sat 31 May 2025 00:00:13 +0000
ROA not after:            Sat 05 Jul 2025 23:59:59 +0000
asID:                     16509
IP address blocks:        2406:dab8:b000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 07 Jun 2025 20:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:75:5f:51:5c:7c:cd:b0:0a:e8:ef:fd:00:22:9f:fe:39:59:5a:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37
        Validity
            Not Before: May 31 00:00:13 2025 GMT
            Not After : Jul  5 23:59:59 2025 GMT
        Subject: serialNumber=e6e9a9ca811abb20ef9acf4160104933bf10ce5f358818dbc64c4c5f74eb64b1, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:25:1b:14:8a:b1:81:28:16:ad:72:55:5f:9c:
                    19:6c:aa:68:dd:d8:ab:6f:3d:d1:db:f3:05:cd:f9:
                    d2:f6:70:89:ec:27:f5:8f:e4:b4:6f:19:bc:06:27:
                    1d:9b:b8:e6:02:45:b9:86:77:4d:55:37:5c:ac:59:
                    8b:66:a1:79:43:67:ee:35:7e:92:43:22:91:87:9d:
                    a1:18:2c:f9:7e:01:0d:4c:b3:10:60:87:2e:20:fb:
                    91:41:b8:40:06:d3:cb:6d:8d:f5:12:7d:d4:6c:5a:
                    64:11:cf:a9:c3:77:65:07:b8:c5:e0:1f:54:f7:f0:
                    04:87:6b:b8:58:ed:cc:4e:ad:27:b5:9c:69:d0:3f:
                    d0:91:85:86:d9:ba:ee:ff:2d:f1:9a:3b:7f:0e:e0:
                    0e:b4:dd:bc:1c:02:22:b9:36:47:e4:af:02:f7:b8:
                    97:5e:8c:31:38:9b:fc:37:f8:0a:5c:99:09:8d:a0:
                    aa:6d:77:88:46:eb:26:be:0a:25:93:75:e0:ca:7c:
                    12:c6:6d:5d:23:73:bb:6b:3f:3b:be:6c:42:f7:48:
                    2e:46:79:db:bf:c9:ba:15:bc:22:e9:1e:3f:ca:94:
                    d0:73:87:3c:26:71:86:a9:65:3d:1c:33:18:1a:82:
                    2a:d6:93:f7:96:df:95:87:ad:87:0d:dc:52:7c:08:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:24:A3:74:BA:02:23:08:42:B0:A0:37:73:70:96:B5:20:D1:77:6D
            X509v3 Authority Key Identifier:
                keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/8440a229-96f8-4a89-b068-a25fe646532e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:dab8:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         63:e9:61:ab:d2:74:b0:0d:46:5a:67:16:f6:c3:9d:81:c0:fb:
         21:1f:19:2e:3f:ee:27:b7:26:8e:ee:f7:84:2a:92:13:c7:ef:
         d0:a9:39:5b:5b:e7:d6:02:66:ac:fd:28:80:b0:ff:99:91:61:
         19:a3:44:f0:5a:2c:ee:be:bb:5f:1d:53:6a:fb:84:63:2a:85:
         7c:8a:b9:95:77:26:c7:cb:aa:42:76:91:87:7d:fe:0a:39:5b:
         c4:79:1b:f8:60:05:13:c1:09:d1:4b:50:c1:b8:cb:dd:ab:2b:
         64:fa:2f:24:ad:de:66:89:8d:b2:fe:13:bd:6d:fd:f2:1a:4d:
         4d:4e:37:af:68:c7:94:82:dc:2a:cf:3b:d7:c7:4b:4d:ca:08:
         32:af:dc:50:48:46:a5:ec:e5:68:a3:ae:64:ce:ea:c9:ae:bf:
         57:f1:de:34:6e:d2:22:d8:d2:04:06:6c:64:8b:66:78:12:77:
         d1:ea:f7:cc:38:90:ad:83:a1:33:f2:1c:53:f6:d9:f6:f0:93:
         a3:91:72:96:99:3a:12:f8:79:bc:07:0c:2f:c7:a7:eb:c9:fa:
         36:f3:f2:9d:de:c1:42:80:b5:51:d2:56:b5:d1:20:9e:c2:cb:
         4b:d9:64:74:3c:ce:2f:d1:7f:8c:9c:94:f0:3f:f3:f9:45:1b:
         32:bd:ca:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 23:14:46 2025 by rpki-client